[SECURITY] Fedora 17 Update: cxf-2.4.9-2.fc17

Apache CXF is an open-source services framework that aids in the development of services using front-end programming APIs, like JAX-WS and JAX-RS...

[SECURITY] Fedora 18 Update: cxf-2.4.9-2.fc18

Apache CXF is an open-source services framework that aids in the development of services using front-end programming APIs, like JAX-WS and JAX-RS...

Code injection

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, whi...

CVE-2012-3006

The CVE-2012-3006 entry concerns Innominate mGuard devices (Smart HW before HW-101130, BD before BD-101030, Industrial RS, Delta HW before HW-103060, BD before BD-211010, PCI, Blade, EAGLE) running software before 7.5.0. The root cause is insufficient entropy when generating private keys for HTTP...

CVE-2012-3006: Undefined Security Weakness

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, whi...

PHPList 2.10.9 'Sajax.php' PHP代码注入漏洞

phplist是一个开源的newsletter管理软件，用PHP开发。 PHPList 'Sajax.php'不正确处理用户提交的数据，远程攻击者可以利用漏洞提交恶意代码，并以WEB权限执行。 0 PHPList 2.10.9 厂商解决方案 phplist ----- 目前没有详细解决方案提供： http://www.phplist.com/ --------------------------------------- This PoC was written for educational purpose. Use it at your own risk. Author will b...

PT-2011-4977

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the rs or rsargs parameter in a mailbox Drafts action to the default URI. Recommendations For Hastymail2...

CVE-2011-4542: Improper Neutralization of Special Elements used in an SQL Command

Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the 1 rs or 2 rsargs parameter in a mailbox Drafts action to the default URI...

CVE-2011-4541: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

PT-2011-4976

Name of the Vulnerable Software and Affected Versions Hastymail2 version 2.1.1 before RC2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

Hastymail "rs"和"rsargs[]"参数远程代码注入漏洞

BUGTRAQ ID: 50794 CVE ID: CVE-2011-4542 Hastymail是一个用PHP编写的快速、安全、兼容RFC、跨平台的IMAP/SMTP客户端应用程序。 Hastymail实现上存在输入验证漏洞，篡改后的$POST'rs'和$POST'rsargs'输入参数没有被正确检查过滤，攻击者可利用这些漏洞注入和执行任意代码，导致Web服务器执行任意PHP代码、泄露敏感信息、删除任意文件。 Hastymail 厂商补丁： Hastymail --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Hastymail 'rs' and 'rsargs[]' Parameters Remote Code Injection Vulnerabilities

The host is running Hastymail2 and is prone to remote code injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamremotecodeinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Hastymail 'rs' and 'rsargs' Parameters Remote Code Injection Vulnerabilities Authors: Sooraj KS...

PT-2010-5276

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36.1 Description The issue is related to the rs ioctl function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain potentially sensitive...

Unfixed XSS vulnerability at rs-code.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting rs-code.com, which at the time of submission ranked 2133539 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

WordPress cformsII plugin rs and rsargs parameters to a script injection vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Nicole Stich cformsII 11.5 Vulnerability description: WordPress is a Free Forum Blog system. WordPress using cformsII plugin does not properly filter user submitted to the wp-content/plugins/cforms /libajax. php page of the rs and rsargs parameters will be displayed to the user...

PT-2010-5209

Name of the Vulnerable Software and Affected Versions cforms WordPress plugin version 11.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the rs and rsargs parameters in the...

CVE-2010-3977: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wp-content/plugins/cforms/libajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the 1 rs and 2 rsargs parameters...

Cforms <= 13.1 - 'lib_ajax.php' Cross-Site Scripting (XSS)

The cforms plugin has a XSS vulnerability in file libajax.php with rs and rsargs parameters. It is fixed in version 13.2. The cforms2 fork was forked at 14.6, so it is not affected...

Joomla! Component com_qcontacts - SQL Injection

Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla Component QContacts comqcontacts -...

Joomla ChronoForms Blind SQL Injection

Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability ! Discovered by : mlk Renan ! Teams : c00kies ,...